Official, Anthropic-managed directory of high quality Claude Code Plugins.
276 matches across 11 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …-server-dev/skills/build-mcp-server/references/auth.md | 50 | ┌─────────┐ client_id=https://... ┌──────────────┐ upstream OAuth ┌──────────┐ |
| MEDIUM | …/learning-output-style/hooks-handlers/session-start.sh | 10 | "additionalContext": "You are in 'learning' output style mode, which combines interactive learning with educational |
| MEDIUM | …or/skills/skill-creator/eval-viewer/generate_review.py | 284 | # --------------------------------------------------------------------------- |
| MEDIUM | …or/skills/skill-creator/eval-viewer/generate_review.py | 286 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/_base.py | 112 | # ────────────────────────────────────────────────────────────────────────── |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 267 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 269 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 417 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 419 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 421 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 423 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 481 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 483 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 349 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 358 | # ===================================================================== |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 672 | # ─── push-sweep ───────────────────────────────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/patterns.py | 165 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/patterns.py | 167 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 21 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 23 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 39 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 41 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 222 | # ─── push-sweep reviewed-commit tracking ──────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 238 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 240 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 242 | # ─── push-sweep reviewed-commit tracking ──────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 327 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/diffstate.py | 329 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 23 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 25 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 67 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 69 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 179 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 181 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 286 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/review_api.py | 288 | # --------------------------------------------------------------------------- |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 139 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 141 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 205 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 207 | # ===================================================================== |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 304 | # ── 3rd-party provider routing (Bedrock / Vertex / Foundry / Mantle) ───── |
| MEDIUM | plugins/security-guidance/hooks/extensibility.py | 43 | # ── caps ───────────────────────────────────────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/extensibility.py | 57 | # ── public API ─────────────────────────────────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/extensibility.py | 89 | # ── claude-security-guidance.md ─────────────────────────────────────────────────────── |
| MEDIUM | plugins/security-guidance/hooks/extensibility.py | 144 | # ── security-patterns.{yaml,json} ──────────────────────────────────────────── |
| MEDIUM | …planatory-output-style/hooks-handlers/session-start.sh | 10 | "additionalContext": "You are in 'explanatory' output style mode, where you should provide educational insights abou |
| MEDIUM | .github/workflows/scan-plugins.yml | 385 | # ───────────────────────────────────────────────────────────────────────────── |
| MEDIUM | .github/workflows/scan-plugins.yml | 414 | # ───────────────────────────────────────────────────────────────────────────── |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …ver-dev/skills/build-mcpb/references/local-security.md | 71 | except Exception: |
| MEDIUM | …or/skills/skill-creator/eval-viewer/generate_review.py | 408 | print(f"Error: {workspace} is not a directory", file=sys.stderr) |
| LOW | …skill-creator/skills/skill-creator/scripts/run_eval.py | 223 | except Exception as e: |
| MEDIUM | …skill-creator/skills/skill-creator/scripts/run_eval.py | 276 | print(f"Error: No SKILL.md found at {skill_path}", file=sys.stderr) |
| LOW | …-creator/skills/skill-creator/scripts/package_skill.py | 106 | except Exception as e: |
| MEDIUM | …or/skills/skill-creator/scripts/improve_description.py | 205 | print(f"Error: No SKILL.md found at {skill_path}", file=sys.stderr) |
| MEDIUM | …skill-creator/skills/skill-creator/scripts/run_loop.py | 265 | print(f"Error: No SKILL.md found at {skill_path}", file=sys.stderr) |
| LOW | plugins/security-guidance/hooks/_base.py | 79 | except Exception: |
| LOW | plugins/security-guidance/hooks/_base.py | 105 | except Exception: |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 378 | def _sweep(state): |
| MEDIUM | …gins/security-guidance/hooks/security_reminder_hook.py | 930 | def _agentic() -> None: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 410 | except Exception as e: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 438 | except Exception: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 447 | except Exception: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 460 | except Exception: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 933 | except Exception as e: # pragma: no cover — crash → let fallback win |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 949 | except Exception as e: # pragma: no cover |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1334 | except Exception: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 2107 | except Exception: |
| LOW | plugins/security-guidance/hooks/session_state.py | 84 | except Exception: |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 51 | except Exception: |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 63 | except Exception: |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 130 | except Exception: |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 214 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 283 | except Exception as exc: |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 1237 | def _tolerant(data): |
| LOW | plugins/security-guidance/hooks/llm.py | 1158 | except Exception as e: # ImportError or transitive failure |
| LOW | plugins/security-guidance/hooks/llm.py | 91 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/llm.py | 354 | except Exception: |
| LOW | plugins/security-guidance/hooks/llm.py | 368 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/llm.py | 429 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/llm.py | 1139 | except Exception: |
| LOW | plugins/security-guidance/hooks/llm.py | 1240 | except Exception: |
| LOW | plugins/security-guidance/hooks/llm.py | 1245 | except Exception: |
| LOW | plugins/security-guidance/hooks/llm.py | 1353 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/llm.py | 1420 | except Exception: |
| LOW | plugins/security-guidance/hooks/llm.py | 1588 | except Exception: |
| LOW | plugins/security-guidance/hooks/extensibility.py | 69 | except Exception as e: |
| LOW | plugins/security-guidance/hooks/extensibility.py | 74 | except Exception as e: |
| LOW | plugins/hookify/core/config_loader.py | 236 | except Exception as e: |
| MEDIUM | plugins/hookify/core/config_loader.py | 264 | print(f"Error: Cannot read {file_path}: {e}", file=sys.stderr) |
| MEDIUM | plugins/hookify/core/config_loader.py | 267 | print(f"Error: Malformed rule file {file_path}: {e}", file=sys.stderr) |
| MEDIUM | plugins/hookify/core/config_loader.py | 270 | print(f"Error: Invalid encoding in {file_path}: {e}", file=sys.stderr) |
| LOW | plugins/hookify/core/config_loader.py | 272 | except Exception as e: |
| MEDIUM | plugins/hookify/core/config_loader.py | 273 | print(f"Error: Unexpected error parsing {file_path} ({type(e).__name__}): {e}", file=sys.stderr) |
| LOW | plugins/hookify/hooks/userpromptsubmit.py | 42 | except Exception as e: |
| LOW | plugins/hookify/hooks/stop.py | 42 | except Exception as e: |
| LOW | plugins/hookify/hooks/pretooluse.py | 53 | except Exception as e: |
| LOW | plugins/hookify/hooks/posttooluse.py | 50 | except Exception as e: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …creator/skills/skill-creator/scripts/quick_validate.py | 7 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 59 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 60 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 67 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 68 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 69 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 70 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 79 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 80 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 88 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 94 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 94 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 94 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 94 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 94 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 98 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 112 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 122 | |
| 12 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …h-olympiad/skills/math-olympiad/scripts/check_latex.sh | 1 | #!/bin/bash |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 141 | # Pattern-based rules (enabled by default; set to "0" to use only LLM review) |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 341 | ts_list.append(now) |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 521 | # consumer and it runs under the state lock. Overwriting baseline_sha now |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 621 | re.compile(r'^ rename ', re.MULTILINE), |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 641 | # widening for `gt create:*` / `gt modify:*` / `gt submit:*` ships in the |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 661 | # docstring for the rationale that motivated the switch from a lifetime cap. |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 681 | # `gh pr create` is intentionally NOT a separate hooks.json matcher: gh runs |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1001 | # signal before treating the tool call as a successful commit. The old |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1081 | emit_metrics({"skipped": True, "skip_reason": 25, **_base}) |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1101 | # line; chained commands like `git commit && git commit` produce multiple |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1121 | if _reflog_shas: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1141 | # silently drop the first commit's content from review (no prior |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1341 | # dropped candidates — otherwise it's redundant with `survived` and eats |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1521 | # forward from the last `To <remote>` header. |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1641 | if not diff_files: |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 2141 | # Load project-specific security guidance and custom patterns once |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 2161 | if hook_event_name == "Stop": |
| LOW | plugins/security-guidance/hooks/diffstate.py | 21 | # ===================================================================== |
| LOW | plugins/security-guidance/hooks/diffstate.py | 221 | |
| LOW | plugins/security-guidance/hooks/diffstate.py | 241 | |
| LOW | plugins/security-guidance/hooks/gitutil.py | 261 | with push-sweep. |
| LOW | plugins/security-guidance/hooks/gitutil.py | 601 | # `Jenkinsfile.release`. splitext gives ext='.dev'/'.am' for these so they |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 141 | os.close(os.open(sentinel, os.O_CREAT | os.O_EXCL | os.O_WRONLY)) |
| LOW | plugins/security-guidance/hooks/llm.py | 121 | # Model for security review. Default chosen for its precision profile on |
| LOW | plugins/security-guidance/hooks/llm.py | 1201 | # this hook is by definition >= the plugin's tested floor, so it's |
| LOW | plugins/security-guidance/hooks/llm.py | 1261 | # permission mode, so bypassPermissions is unnecessary (and |
| LOW | plugins/security-guidance/hooks/llm.py | 1281 | _DEFAULT_PUBLIC_MODEL if model != _DEFAULT_PUBLIC_MODEL else None |
| LOW | plugins/security-guidance/hooks/llm.py | 1361 | # Keep medium-severity candidates through self-refute — that pass is the |
| LOW | plugins/security-guidance/hooks/sg-python.sh | 1 | #!/usr/bin/env bash |
| LOW | plugins/security-guidance/hooks/sg-python.sh | 21 | # bash "${CLAUDE_PLUGIN_ROOT}/hooks/sg-python.sh" \ |
| LOW | .github/workflows/revert-failed-bumps.yml | 1 | name: Revert Failed Bumps |
| LOW | .github/workflows/check-mcp-urls.yml | 1 | name: Check MCP URLs |
| LOW | .github/workflows/scan-plugins.yml | 1 | name: Scan Plugins |
| LOW | .github/workflows/scan-plugins.yml | 81 | # Federation (anthropic-federation-rule-id input) — the IDs are literal |
| LOW | .github/workflows/scan-plugins.yml | 381 | echo "::error::Scan step failed without a parseable policy verdict (likely an infra error)." |
| LOW | .github/workflows/scan-plugins.yml | 401 | # scan action evaluated this SHA fresh, `cached` when a prior verdict was |
| LOW | .github/workflows/bump-plugin-shas.yml | 1 | name: Bump Plugin SHAs |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | …gins/security-guidance/hooks/security_reminder_hook.py | 564 | cross-repo case (`cd ../other && git commit --amend && cd -`) where |
| HIGH | …gins/security-guidance/hooks/security_reminder_hook.py | 714 | `git commit -m x && git push` matches both `Bash(git commit:*)` and |
| HIGH | …gins/security-guidance/hooks/security_reminder_hook.py | 816 | that ran *before* the push, e.g. `git fetch && git push`), and end at |
| HIGH | …gins/security-guidance/hooks/security_reminder_hook.py | 818 | *after* the push, e.g. `git push && git fetch`). |
| HIGH | plugins/security-guidance/hooks/gitutil.py | 245 | pushed the success line off — `git commit && git push` makes HEAD@{0} |
| HIGH | plugins/security-guidance/hooks/gitutil.py | 251 | - cross-repo (`cd ../other && git commit`): repo_root's own reflog has |
| HIGH | plugins/security-guidance/hooks/ensure_agent_sdk.py | 293 | # null). Stay inside the 10-key emit cap. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …or/skills/skill-creator/eval-viewer/generate_review.py | 85 | |
| LOW | …or/skills/skill-creator/eval-viewer/generate_review.py | 149 | |
| LOW | …or/skills/skill-creator/eval-viewer/generate_review.py | 288 | |
| LOW | …skill-creator/skills/skill-creator/scripts/run_eval.py | 35 | |
| LOW | …-creator/skills/skill-creator/scripts/package_skill.py | 42 | |
| LOW | …or/skills/skill-creator/scripts/improve_description.py | 50 | |
| LOW | …or/skills/skill-creator/scripts/aggregate_benchmark.py | 67 | |
| LOW | …reator/skills/skill-creator/scripts/generate_report.py | 16 | |
| LOW | …ns/skill-creator/skills/skill-creator/scripts/utils.py | 7 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 371 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 425 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 468 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 711 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1456 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 2110 | |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 378 | |
| LOW | plugins/security-guidance/hooks/session_state.py | 49 | |
| LOW | plugins/security-guidance/hooks/diffstate.py | 265 | |
| LOW | plugins/security-guidance/hooks/diffstate.py | 282 | |
| LOW | plugins/security-guidance/hooks/gitutil.py | 355 | |
| LOW | plugins/security-guidance/hooks/gitutil.py | 693 | |
| LOW | plugins/security-guidance/hooks/ensure_agent_sdk.py | 67 | |
| LOW | plugins/security-guidance/hooks/llm.py | 1112 | |
| LOW | plugins/security-guidance/hooks/extensibility.py | 147 | |
| LOW | plugins/security-guidance/hooks/extensibility.py | 272 | |
| LOW | plugins/hookify/core/config_loader.py | 87 | |
| LOW | plugins/hookify/core/config_loader.py | 198 | |
| LOW | plugins/hookify/core/rule_engine.py | 144 | |
| LOW | plugins/hookify/core/rule_engine.py | 182 | |
| LOW | .github/scripts/discover_bumps.py | 87 |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 276 | def atomic_check_and_mark_warning(session_id, warning_key): |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 485 | def handle_user_prompt_submit(input_data): |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 468 | def extract_content_from_input(tool_name, tool_input): |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 897 | def _agentic_review_with_race( |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 966 | def handle_commit_review_posttooluse(input_data): |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 1456 | def handle_push_sweep_posttooluse(input_data): |
| LOW | …gins/security-guidance/hooks/security_reminder_hook.py | 2070 | def _maybe_bootstrap_agent_sdk_async(): |
| LOW | plugins/security-guidance/hooks/diffstate.py | 116 | def restore_unreviewed_stop_state(session_id, paths, baseline_sha): |
| LOW | plugins/security-guidance/hooks/diffstate.py | 140 | def get_baseline_file_content(session_id, file_path, cwd): |
| LOW | plugins/security-guidance/hooks/diffstate.py | 423 | def _unchanged_since_baseline(p): |
| LOW | plugins/security-guidance/hooks/gitutil.py | 234 | def _git_reflog_recent_commits(repo_root, max_age_s=120, max_n=5): |
| LOW | plugins/security-guidance/hooks/gitutil.py | 623 | def extract_file_paths_from_diff(diff_output): |
| LOW | plugins/security-guidance/hooks/gitutil.py | 693 | def filter_preexisting_from_diff(diff_files, cwd, baseline_sha): |
| LOW | plugins/security-guidance/hooks/llm.py | 34 | def _inject_agent_sdk_venv_into_syspath(state_dir): |
| LOW | plugins/security-guidance/hooks/llm.py | 174 | def _strip_anthropic_from_no_proxy() -> None: |
| LOW | plugins/security-guidance/hooks/llm.py | 183 | def ensure_anthropic_reachable() -> bool: |
| LOW | plugins/security-guidance/hooks/llm.py | 287 | def _model_supports_adaptive_thinking(model: str) -> bool: |
| LOW | plugins/security-guidance/hooks/llm.py | 1035 | def _agentic_commit_review_enabled() -> bool: |
| LOW | plugins/security-guidance/hooks/llm.py | 1613 | def analyze_security_concerns(files: List[Tuple[str, str]], is_diff: bool = False) -> Optional[str]: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | …gin-dev/skills/hook-development/scripts/hook-linter.sh | 3 | # Checks hook scripts for common issues and best practices |
| MEDIUM | plugins/security-guidance/hooks/ensure_agent_sdk.py | 274 | # Tell the harness this is async — venv create + pip install can take |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 1168 | # eval harness it's a temp dir with ONLY touched_paths — the agent can't |
| MEDIUM | plugins/security-guidance/hooks/llm.py | 1169 | # trace cross-file data flow. The harness sets SG_AGENTIC_CONTEXT_DIR to a |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | …n-dev/skills/hook-development/examples/load-context.sh | 17 | # Check if TypeScript |
| LOW | …kills/hook-development/scripts/validate-hook-schema.sh | 123 | # Check if prompt-based hooks are used on supported events |
| LOW | plugins/security-guidance/hooks/diffstate.py | 192 | # Check if HEAD exists (i.e., repo has at least one commit) |
| LOW | plugins/ralph-loop/hooks/stop-hook.sh | 12 | # Check if ralph-loop is active |
| LOW | plugins/ralph-loop/hooks/stop-hook.sh | 60 | # Check if max iterations reached |
| LOW | plugins/ralph-loop/hooks/stop-hook.sh | 118 | # Check if jq succeeded |
| LOW | plugins/hookify/core/config_loader.py | 163 | # Check if this is an inline dict (key: value on same line) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| HIGH | external_plugins/greptile/README.md | 22 | export GREPTILE_API_KEY="your-api-key-here" |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | external_plugins/imessage/skills/access/SKILL.md | 56 | or "user@example.com"). Chat IDs are iMessage chat GUIDs (e.g. |